4 matches found
CVE-2014-0676
Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367...
6.8CVSS6.4AI score0.00358EPSS
SaveExploits0References7
Command injection
Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367...
6.8CVSS6.9AI score0.00358EPSS
SaveExploits0References7
CVE-2014-0676
Cisco NX-OS contains a local-authentication bypass vulnerability (CVE-2014-0676) in TACACS+ command authorization. Affected: Cisco NX-OS software. Description: an authenticated, local attacker can bypass TACACS+ command restrictions by executing a sequence of multiple commands, per Bug CSCum47367...
6.8CVSS6.6AI score0.00358EPSS
SaveExploits0References7Affected Software1
20